Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 10 min 162 bronnen 13 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-5427

MEDIUM · 5.0 CVSS Gepubliceerd: CWE-200

Beschrijving

Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to read password hashes via a POST request.

Vendors

Johnsoncontrols

Affected products

Metsys Application And Data Server Extended Application And Data Server Lonworks Control Server Lcs8520 Network Automation Engine 5510-2 Network Automation Engine 5510-2u Network Automation Engine 5511-2 Network Automation Engine 5520-2 Network Automation Engine 5521-2 Network Integration Engine 5510-2 Network Integration Engine 5511-2 Nxe8500

References